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Receive: 



(1) 



1 . Server Certificate encrypted with 
old CA Public Key (Lt)" 

2. Server CA chain certificate signed 
with new CA Private key (1 .2) 



I 
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Accept transaction (5) 
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YES 



Send request to CA for 
Server CA Chain 
Certificate using private 
key for encryption (9) 




Obtain Server CA Chain 
Certificate encrypted using 
CA's new Public Key and 
store in Database (10) 




Figure 2 



